Symlink Chain Vulnerability in UnRAR Product from PMachapman

CVE-2022-48579

Summary

An identified flaw in UnRAR versions prior to 6.2.3 allows attackers to exploit symlink chains to extract files outside the designated destination directory. This vulnerability can lead to unauthorized access to system files, potentially compromising the integrity of the system. Users of affected versions are advised to update to version 6.2.3 or later to mitigate this security risk.

References